Quick answer

If you suspect fraud or estafa, act immediately: contact the bank, e-wallet, remittance service, marketplace, or other payment provider and ask it to flag or hold the transaction; secure all records; report the incident to the police or the appropriate cybercrime unit; and prepare a sworn complaint supported by documents for the prosecutor’s office that has territorial jurisdiction.

A failed deal, unpaid debt, delayed delivery, or broken promise is not automatically estafa. Criminal liability generally requires legally recognized deceit or abuse of confidence that caused financial or property damage. Recovery is possible through the civil liability included in the criminal case, a properly filed separate civil action, settlement, reversal or freezing of funds, or enforcement against assets—but filing a complaint does not guarantee repayment.

What counts as estafa?

Article 315 of the Revised Penal Code punishes swindling committed through specified means. The most common forms are:

Estafa through false pretenses

This may apply when a person uses a fictitious identity or makes a false claim about authority, qualifications, property, credit, agency, business, or an imaginary transaction.

The prosecution generally must establish that:

The accused made a false representation or used another fraudulent act before or at the same time the victim parted with money or property.
The accused knew the representation was false.
The victim relied on it.
That reliance caused measurable damage.

Examples may include soliciting payment for nonexistent goods, impersonating a legitimate seller or representative, presenting fabricated proof of ownership, or inducing an investment in an imaginary business. The precise charge depends on the communications, transaction flow, identities used, and other evidence.

A promise that later goes unfulfilled is not enough by itself. Evidence must support the conclusion that the representation was false and deceitful when the money or property was obtained—not merely that the transaction later failed.

Estafa through misappropriation or conversion

This form may arise when a person receives money, goods, or other personal property in trust, on commission, for administration, or under another obligation to deliver or return the same property, but instead misappropriates, converts, or denies receiving it.

The distinction between ownership and mere custody or administration is important. If ownership of the money passed under an ordinary loan, nonpayment may be a civil debt rather than estafa through conversion. The contract, receipts, instructions, accounting records, and purpose for which the property was delivered must be examined.

A prior demand is not invariably an element of this form of estafa, but a clear written demand and proof of receipt can help show failure or refusal to account for or return entrusted property.

Estafa involving checks

Issuing a postdated or funded-on-delivery check may amount to estafa under Article 315(2)(d) only when the check was used to obtain money, property, or another benefit through deceit. A check issued merely to pay a debt that already existed usually does not establish that the victim relied on the check in parting with property.

Article 315 also provides a rule concerning failure to fund a check within three days after receipt of notice that it was dishonored for lack or insufficiency of funds. Proof that the drawer actually received the written notice of dishonor is therefore important.

A dishonored check may separately raise an issue under Batas Pambansa Blg. 22. That offense has its own elements, notice requirements, and timelines. Have the check, bank return slip, written demand or notice, and proof of delivery reviewed promptly.

Other fraudulent means

Article 315 also covers certain conduct such as fraudulently inducing someone to sign a document. Article 318 addresses other deceits not specifically listed in the preceding provisions. Investigators and prosecutors—not the complainant—should make the final legal classification based on the proven facts.

When a bad transaction is not necessarily a crime

A dispute is more likely to be civil when the evidence shows a genuine transaction followed by nonperformance, poor workmanship, business loss, inability to pay, or a good-faith disagreement over contractual terms.

Warning signs of possible criminal deceit include:

A fabricated identity, address, licence, ownership document, receipt, or proof of payment
False claims of authority to sell, collect, invest, or represent another person
A nonexistent product, project, account, or business
Immediate diversion of entrusted funds for an unauthorized purpose
Multiple victims given substantially the same false story
Deliberate blocking, disappearance, or destruction of records after payment
Admissions showing that the representation was knowingly false when made

These facts are indicators, not automatic proof. Conversely, repayment of part of the money or a later promise to refund does not necessarily erase an already completed offense, although it may affect the evidence, settlement, or civil balance.

What to do immediately

1. Try to stop the movement of funds

Contact the fraud or security unit of the bank, e-wallet, remittance service, card issuer, cryptocurrency platform, or marketplace using its official app, website, or published telephone number.

Provide:

The transaction reference number
Date, time, and amount
Sending and receiving account details
The recipient’s displayed name and account number
A short explanation that the transfer is disputed as suspected fraud
Any police or incident reference number already available

Ask whether the transaction can be recalled, disputed, frozen, or traced. Request a case number and written acknowledgment. A provider may be unable to reverse a completed transfer, and a complainant ordinarily cannot compel disclosure or freezing of another person’s account without the legal process required by law. Speed nevertheless matters because funds can be moved quickly.

Change compromised passwords, sign out other sessions, enable multi-factor authentication, and tell the provider if an account, SIM, email address, card, or device may have been taken over. Do not disclose an OTP, PIN, recovery code, or password to anyone claiming to help recover the money.

2. Preserve the evidence properly

Keep the original files and devices whenever possible. Preserve:

Complete chat, email, SMS, and call records
The seller’s or recipient’s profile, username, profile URL, telephone number, and email address
Advertisements, listings, livestreams, and representations that induced payment
Contracts, order forms, invoices, receipts, acknowledgments, and delivery records
Bank statements, transfer confirmations, QR codes, wallet addresses, and transaction hashes
Checks, deposit slips, dishonor slips, and notices of dishonor
IDs, permits, certificates, titles, or authority documents supplied by the other party
Written demands, replies, refund promises, and proof that each document was received
Names and contact details of witnesses
A dated timeline stating what was represented, when you relied on it, what you transferred, and what happened afterward

Export conversations where the platform allows it. Take screenshots that show the account identity, date, time, and surrounding context—not isolated statements alone. Keep unedited copies and and make backups. Record where each item came from and who obtained it.

Do not hack an account, secretly impersonate another person, threaten publication of private information, or alter a message or screenshot. Illegally obtained or manipulated material can create separate problems and undermine the complaint.

3. Send an appropriate written demand

A concise demand can request the return of money or property, an accounting, or performance by a definite date. State the relevant transaction and amount accurately. Send it through a method that produces reliable proof of delivery and keep a copy.

A demand can strengthen the documentary record, particularly in cases involving entrusted property or dishonored checks. It does not transform an ordinary unpaid debt into estafa, and waiting indefinitely for repeated refund promises may reduce the practical chance of recovery.

Do not use threats, public shaming, or accusations stated as established fact. A truthful, limited report to the proper authorities is safer than a social-media campaign that may expose personal data or create defamation issues.

4. Report to the proper authorities

For an ordinary transaction, you may begin with the police station responsible for the relevant location or seek assistance from the National Bureau of Investigation. For an online scam or conduct involving digital accounts, preserve the electronic trail and consider reporting to:

The Cybercrime Prevention Act expressly assigns cybercrime law-enforcement responsibilities to the NBI and PNP. Reporting to an investigative agency helps document and investigate the incident, but the institution of a criminal case ordinarily requires the procedure prescribed by the Rules of Criminal Procedure and the current DOJ–National Prosecution Service rules.

If the scheme involves an entity claiming to offer securities or investments, verify and report it through the Securities and Exchange Commission. For concerns involving a BSP-supervised financial institution, first use the institution’s consumer-assistance process and, if unresolved, consult the Bangko Sentral ng Pilipinas.

Report through official channels. Fraudsters sometimes pose as police officers, lawyers, regulators, hackers, or “recovery agents” and demand another payment to release supposedly recovered funds.

Preparing a criminal complaint

A criminal complaint is normally supported by a complaint-affidavit, witness affidavits, and documentary or electronic evidence. It should present facts in chronological order and explain:

Who made each representation
The exact representation or obligation
Why it was false, fraudulent, or inconsistent with the accused’s authority
When and where it was made
How it caused you to part with money or property
Where and how payment or delivery occurred
What the accused did with the property afterward
The exact loss and how it is calculated
How each respondent is connected to the alleged offense

Identify respondents by their true names and addresses if known. If an identity is uncertain, provide the usernames, account details, numbers, photographs, transaction records, and other identifiers without guessing.

Under the current DOJ–NPS preliminary-investigation framework, the prosecutor evaluates whether the evidence supports a prima facie case with reasonable certainty of conviction. A bare accusation, incomplete screenshot, or conclusion that “I was scammed” is not a substitute for evidence of the required acts, intent, reliance, and damage.

Affidavits must be properly sworn before an authorized officer. Filing requirements, prescribed forms, copy counts, accepted filing methods, and office practices should be confirmed directly with the prosecutor’s office because incomplete submissions may be returned or delayed. Observe every deadline stated in a subpoena, notice, or order.

Where should the complaint be filed?

Venue is jurisdictional in criminal cases. Rule 110 generally requires the case to be instituted and tried in the municipality or territory where the offense was committed or where any essential ingredient occurred.

For estafa, the relevant places may include where a material false representation was made or received, where the victim relied on it, where money or property was delivered, or where entrusted property was required to be accounted for. Online transactions can create difficult venue questions. Residence alone does not automatically establish venue.

Bring the complete timeline and records to the prosecutor or a lawyer before filing in a distant or convenient location. Filing in the wrong place can waste time and may affect prescription.

Barangay conciliation may be a pre-filing requirement for some disputes between parties who actually reside in the same city or municipality, subject to the exceptions in the Local Government Code. It does not cover every estafa case; among the statutory exceptions are offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000. Because the applicable penalty depends on the charge, amount, date, and circumstances, confirm whether a Certificate to File Action is required instead of assuming that barangay proceedings apply—or do not apply.

Online fraud and the Cybercrime Prevention Act

Not every scam arranged through chat or social media is automatically the distinct offense of computer-related fraud.

Section 4(b)(2) of Republic Act No. 10175 defines computer-related fraud in terms of unauthorized input, alteration, or deletion of computer data or programs, or interference with a computer system, causing damage with fraudulent intent. Section 6 separately covers crimes under the Revised Penal Code or special laws committed by, through, and with information and communications technologies and generally prescribes a penalty one degree higher.

The correct application may depend on whether technology was merely used to communicate, whether computer data or a system was manipulated without authority, and how the charged conduct is alleged. Let investigators and prosecutors assess the appropriate provision.

The Act requires service providers to preserve specified traffic data and subscriber information for at least six months from the transaction, while content data is preserved for six months from receipt of a lawful preservation order. Those rules do not mean a private complainant can demand another user’s protected data. Prompt reporting gives law enforcement a better opportunity to pursue lawful preservation and disclosure before records are lost.

How recovery can be pursued

Recovery through the criminal case

Under Rule 111, the civil action to recover civil liability arising from the charged offense is generally deemed included when the criminal action is instituted, unless the offended party:

Waives the civil action;
Reserves the right to file it separately; or
Filed the civil action before the criminal action.

A reservation must be made before the prosecution begins presenting evidence and while the offended party has a reasonable opportunity to reserve. Actual damages must be supported by competent proof, such as transfer records, receipts, valuation evidence, and proof of amounts already returned.

A conviction may include restitution, reparation, or damages, but a judgment is not the same as immediate payment. Collection may still require execution against property that legally belongs to the judgment debtor.

In appropriate cases, Rule 127 permits attachment of an accused’s property as security for civil liability, including situations involving fraudulently converted property, concealment or disposal of assets, a risk of absconding, or residence outside the Philippines. Attachment is a formal court remedy with bond and procedural requirements; it is not an automatic freeze obtained merely by alleging fraud.

A separate civil action

Depending on the facts, recovery may also be based on contract, restitution, unjust enrichment, quasi-delict, or another source of obligation. A separate civil case may be useful when the available proof establishes a debt or contractual breach but does not sufficiently establish criminal deceit.

Once a criminal action has commenced, a separate civil action arising from the offense generally cannot be newly instituted until final judgment; if already filed, it may be suspended, subject to the rules on consolidation and independent civil actions. A claimant cannot recover twice for the same injury.

Before choosing a separate case—or waiving or reserving the civil action—obtain advice about filing fees, prescription, evidence, available defendants, and collectability.

Small claims and settlement

The Revised Rules on Small Claims may provide a simpler route for certain qualifying civil money claims within the current jurisdictional ceiling, including specified contractual claims and enforcement of barangay settlements or arbitration awards. It is not a universal procedure for every fraud-related damage claim. Confirm that the cause of action, amount, court, and required prior steps fall within the current rule.

A voluntary settlement may provide faster recovery, but it should clearly identify:

The admitted or agreed obligation
Payment dates and methods
Treatment of partial payments
Security or collateral, if any
Consequences of default
Which claims are being released and when the release becomes effective

Do not sign a quitclaim, affidavit of desistance, or full release merely in exchange for another unsecured promise. Criminal prosecution is controlled by law and public authorities; private settlement does not invariably require dismissal of a completed public offense.

Amounts and potential penalties

Republic Act No. 10951 adjusted the value thresholds used in Article 315. For many forms of estafa under Article 315, the principal brackets are:

More than ₱2.4 million up to ₱4.4 million
More than ₱1.2 million up to ₱2.4 million
More than ₱40,000 up to ₱1.2 million
₱40,000 or less

The exact penalty depends on the mode of estafa, amount, date of commission, aggravating or mitigating circumstances, and other applicable laws. Estafa involving certain checks has a separate penalty schedule under Article 315(2)(d). Use of information and communications technology may also affect the penalty under Republic Act No. 10175.

These thresholds classify penalties; they are not minimum-loss requirements for making a report. Do not calculate exposure from the amount alone or threaten a person with a particular prison term without a case-specific legal analysis.

Time limits: do not delay

Criminal and civil claims are subject to prescription. The criminal prescriptive period may depend on the legally prescribed penalty, the offense ultimately charged, the date or discovery of the offense, and what event legally interrupts prescription. Special laws may apply different rules. Civil claims may have different periods depending on whether they arise from a written contract, an oral agreement, injury to rights, fraud, or another legal basis.

A police blotter, private demand, platform report, or barangay complaint should not automatically be assumed to interrupt every applicable prescriptive period. Obtain legal advice promptly if the transaction is old, the accused is leaving, documents may disappear, or a deadline is approaching.

Common mistakes that weaken a complaint or recovery effort

Treating every unpaid debt or failed investment as automatic estafa
Failing to identify the specific false representation or entrusted property
Producing cropped screenshots without dates, usernames, or conversation context
Deleting chats or surrendering the only original device without keeping a documented copy
Omitting facts that may appear unfavorable
Naming account holders, employees, directors, or relatives without evidence of personal participation
Filing solely where the complainant lives without establishing an essential ingredient there
Sending money to an unverified “recovery agent”
Posting IDs, account numbers, private conversations, or categorical accusations publicly
Accepting repeated refund promises until records disappear or claims prescribe
Signing a release before cleared funds or agreed security are received
Assuming a criminal complaint will automatically freeze assets or return the money
Starting overlapping civil and criminal proceedings without considering Rule 111

Accuracy matters more than dramatic language. State what you personally know, identify what a record shows, and label information from another person as such.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The amount is substantial or represents essential household or business funds
The recipient is transferring, hiding, or disposing of assets
The suspect or funds are outside the Philippines
Several people or corporate entities handled the transaction
Cryptocurrency, shell accounts, identity theft, or hacked systems are involved
You need a preservation order, subpoena, warrant, attachment, or injunction
A prosecutor has dismissed the complaint or issued a deadline
You are considering a separate civil case, reservation of civil claims, or settlement
A check case has notice or filing-date issues
The events occurred months or years ago
You have been threatened, blackmailed, or placed in physical danger

For an immediate threat to life or safety, contact emergency law enforcement rather than confronting the suspected offender.

Frequently asked questions

Can I file even if I know only the scammer’s username or account number?

You may report the incident and provide every available identifier, but investigators will need lawful means to identify the responsible person. Do not assume that the displayed account holder is necessarily the person who devised or knowingly joined the scheme; mule, stolen, and compromised accounts are possible.

Is a police blotter already a criminal case?

No. A blotter records a reported incident. Investigation, a sworn complaint, prosecutorial evaluation, filing of an information when warranted, and court proceedings are distinct stages.

Must I send a demand letter first?

Not in every estafa case. A demand may be evidentially important in conversion and check cases and practically useful for recovery, but it cannot supply deceit that was absent when the transaction occurred. Obtain advice about the required notice and proof of receipt for a dishonored check.

Can the bank immediately return my transfer?

Not necessarily. Reversal depends on transaction status, provider rules, available funds, fraud controls, and legal restrictions. Report immediately and obtain a case reference, but be prepared to pursue law-enforcement and judicial remedies.

Can I recover from the bank or e-wallet instead of the scammer?

Provider liability is fact-specific. It may depend on whether the transaction was authorized, whether credentials were compromised, the provider’s security controls and disclosures, applicable BSP rules, and the conduct of the account holder. A voluntary transfer induced by a scam is not necessarily treated the same as an unauthorized account takeover.

Will repayment automatically dismiss the criminal case?

No. Repayment can satisfy or reduce civil liability and may affect the parties’ positions, but it does not automatically extinguish criminal liability for an offense already completed. Any settlement or affidavit of desistance should be reviewed before signing.

What if the prosecutor dismisses the complaint?

The resolution should identify the factual and legal basis for dismissal and the available remedy and deadline. Seek counsel immediately. A motion for reconsideration or petition for review may be available, but the correct remedy, filing office, record requirements, and period depend on the governing rules and procedural history.

Can several victims file together?

Victims may coordinate evidence and identify a common scheme, but separate transactions can involve separate offenses, venues, and affidavits. Each victim should document the representation made to them, their reliance, payment, and loss.

Is there estafa if some goods or returns were delivered?

Possibly, but partial performance may support either side depending on the facts. It does not conclusively prove good faith or deceit. The complete transaction history and the accused’s intent at the relevant time remain important.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Estafa, venue, prescription, cybercrime, civil remedies, and recovery depend on the documents and specific facts. Official sources and current procedures were checked as of September 15, 2026.